Dockerfile

# Stage 1: Build
FROM oven/bun:1 AS builder

WORKDIR /app

# Install Node.js repository and build dependencies
RUN apt-get update && \
    apt-get install -y \
    curl \
    python3 \
    make \
    g++ \
    gcc \
    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
    && apt-get install -y nodejs \
    && rm -rf /var/lib/apt/lists/* \
    && ln -s /usr/bin/python3 /usr/bin/python

# Copy only the necessary files
COPY package*.json ./
COPY tsconfig.json ./
COPY src ./src
COPY scripts/decrypt.ts ./scripts/
COPY scripts/genTypes.sh ./scripts/
COPY config ./config

# Make genTypes.sh executable
RUN chmod +x ./scripts/genTypes.sh

# Generate types and install dependencies
RUN mkdir -p src/types/modules && \
    npm install && \
    ./scripts/genTypes.sh && \
    bun install --production

# Stage 2: Production
FROM oven/bun:1-slim

WORKDIR /app

# Copy only runtime files
COPY --from=builder /app/package*.json ./
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/src ./src
COPY --from=builder /app/scripts/decrypt.ts ./scripts/
COPY --from=builder /app/config ./config
COPY --from=builder /app/tsconfig.json ./

# Set environment variables
ENV NODE_ENV=production

# Create non-root user for security (Debian syntax)
RUN groupadd -r app && \
    useradd -r -g app -s /bin/false app && \
    chown -R app:app /app

USER app

# Use ENTRYPOINT to run TypeScript directly with Bun
ENTRYPOINT ["bun", "run", "scripts/decrypt.ts"]

# Default to showing help/usage if no args provided
CMD ["--help"]